Root Causes 223: CT Log-Enabled Attacks on WordPress Sites

11/05/2022 14 min
Root Causes 223: CT Log-Enabled Attacks on WordPress Sites

Listen "Root Causes 223: CT Log-Enabled Attacks on WordPress Sites"

Episode Synopsis

Attackers are using CT logs to identify brand new WordPress sites and install malware before upcoming security measures are in place. This attack is novel in how it exploits Certificate Transparency information to identify likely targets. In this episode we explain what is happening and why it's noteworthy.